Medium
Cotonti through 1.0.0 Reflected XSS via message.php lng parameter
Type: advisorySource: Official CVE List
Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in message.php where the lng parameter is not properly escaped before output in the confirmation dialog. Unauthenticated attackers can craf…
Products: CotontiCVEs: CVE-2026-100522